Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.cer (raw, json)
Hash identifier: +Ufl7B5KDpwpql3OTG1kX+nQqijEmDqkOQieB1gQCeE=
Subject key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4244A20E15CB5D14A4B5C1E911F6843
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29192
IP: 195.85.222.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4a:20:e1:5c:b5:d1:4a:4b:5c:1e:91:1f:68:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71986731925be8551a53091afe6d0972dfa3807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:20:e4:45:93:7e:45:79:b0:44:f4:05:a4:
69:23:bb:e3:3e:8f:29:59:fc:4c:ad:a6:0b:f7:f6:
d6:55:9b:f9:2a:e5:6c:cc:43:e8:2a:91:3f:ef:ad:
1a:47:86:28:30:b9:af:1f:da:02:cb:ca:07:65:67:
79:22:b1:5a:9f:2d:fc:47:a4:32:07:ac:b3:b6:41:
c9:84:7a:05:89:c9:27:bb:6a:d8:50:19:03:96:4c:
ed:52:20:71:5f:8f:4a:f2:80:1a:1f:8c:84:5c:2c:
2e:e3:d3:2e:c9:7b:ad:7d:bf:64:28:a3:b0:cf:d8:
ef:28:8f:ef:a9:0c:81:c6:4c:08:c0:09:7b:0c:94:
46:d6:0d:ef:cc:34:0d:a9:09:53:11:38:49:95:98:
ea:18:51:bc:62:cd:34:af:da:72:74:2d:ac:f6:2a:
07:0e:35:c3:03:f7:0a:26:c7:43:3e:bf:5e:9e:a7:
b7:76:39:a5:64:21:96:5e:ae:22:67:bf:07:e5:9a:
87:9b:cd:b9:1b:c4:df:2f:c6:9f:71:7e:a2:11:a5:
fc:b4:a9:17:84:dc:cd:cc:32:48:3a:a6:b5:02:73:
e2:56:3b:a2:3e:07:b9:cb:4a:2a:f1:93:32:82:c5:
9e:32:46:0b:2d:ac:0b:2f:b3:95:11:ce:b7:ec:87:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.222.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29192
Signature Algorithm: sha256WithRSAEncryption
3a:15:2b:02:52:db:08:52:5f:e5:34:eb:63:37:97:38:62:65:
67:f6:bf:7a:a9:8c:22:8a:69:87:a1:d0:08:5e:95:d6:f7:ee:
d7:75:60:15:03:b6:5a:be:51:8d:03:3e:6f:17:89:b9:d4:db:
8a:c6:8d:95:87:c5:7e:0f:62:3a:54:1a:e9:84:db:c8:ab:f5:
1d:a0:e3:d3:8f:9c:dc:01:80:01:f1:c7:21:a5:75:2a:78:62:
81:bd:8b:18:d3:de:50:03:f1:13:c9:c2:44:b1:20:8a:e9:2b:
00:73:fb:78:38:2f:25:e4:6c:2c:43:63:84:9d:a9:46:21:a3:
1d:eb:88:e3:42:62:64:25:40:ad:2c:8f:90:9a:51:37:4b:8d:
b1:f4:6c:eb:63:9f:8d:71:34:03:3f:e4:c2:45:5d:ea:c4:77:
66:3a:99:ad:a9:09:f9:9d:ab:79:e4:4a:a1:3b:b0:dc:b2:16:
6b:de:39:e8:a5:3a:67:14:a1:fd:87:f1:08:de:32:fd:b2:d3:
74:9e:4d:a1:45:65:97:5a:0b:55:3b:91:65:b9:c8:f0:64:85:
18:8b:be:64:45:82:d4:5a:01:f2:52:db:5e:c8:45:17:31:dd:
dc:fe:7d:cb:fb:7b:5a:5a:0e:e5:57:c4:5b:5a:89:36:59:d9:
78:fd:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:25 2024 by rpki-client on console-fra.rpki-client.org